2 matches found
Change Storefront to force clients to download a specific Workspace App package
When downloading Workspace App from Storefront landing page, it is pulling the most recent version instead of specific desired Workspace App package...
Authentication Bypass
Overview Affected versions of this package are vulnerable to Authentication Bypass. The perpetrator who previously obtained an old expired user token could use it to access Storefront API v2 endpoints. Remediation Upgrade spree to version 3.7.11, 4.0.4, 4.1.11 or higher. References - GitHub Commi...